$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa File: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (raw, json) Hash identifier: pro5NilQGWbMjP37c/ylcxjVIVt9TFMHPGpPmjfbyTk= Subject key identifier: 01:FF:59:A1:AD:6E:D7:07:08:DB:1E:4C:9D:89:EE:8E:3C:F0:67:5D Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 06B4A59CF4B2EBFC363A6B90505E90092C613C6E Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa Signing time: Fri 26 Jul 2024 02:00:00 +0000 ROA not before: Fri 26 Jul 2024 01:55:00 +0000 ROA not after: Fri 25 Jul 2025 02:00:00 +0000 asID: 140384 IP address blocks: 103.149.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b4:a5:9c:f4:b2:eb:fc:36:3a:6b:90:50:5e:90:09:2c:61:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Jul 26 01:55:00 2024 GMT Not After : Jul 25 02:00:00 2025 GMT Subject: CN=01FF59A1AD6ED70708DB1E4C9D89EE8E3CF0675D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:5d:d9:10:9b:f7:60:a4:6f:c2:6b:eb:31: b3:b5:49:4a:75:c6:ce:7d:f7:cb:4b:db:44:17:11: 2c:ad:67:92:b7:5c:35:64:b2:b2:24:6d:b9:05:d3: 1a:0b:59:14:bb:40:02:c1:5e:c9:a8:50:6f:45:5c: 65:0d:b2:30:47:5b:d9:13:68:92:5a:31:99:99:b1: 3d:4e:05:38:4c:6b:f1:54:51:84:87:22:77:90:d3: 75:5f:25:ae:04:b8:b4:61:f3:a1:12:16:7a:76:e5: 47:54:10:53:e0:39:4c:7f:63:7d:f4:6c:72:ab:b2: 6e:97:98:43:c3:d5:ac:95:f9:6c:2e:67:7a:55:c0: 4e:02:64:5f:09:b5:c6:d4:f0:fe:37:75:e1:b5:8a: f6:a7:41:ce:24:2e:de:3f:9d:ea:4b:65:53:6b:67: d9:2b:00:71:c0:a0:81:3e:19:96:9b:38:aa:d2:6c: d9:61:b5:24:fc:0a:76:9d:df:11:e8:3b:2b:5b:ab: bb:32:da:91:f1:a5:bf:85:5f:92:28:ca:84:ec:af: a1:dd:fa:8a:eb:8e:72:5c:ed:09:d2:51:f0:0e:c0: 09:42:d4:d9:7d:d9:14:0a:11:c4:ba:e3:cb:67:e4: c0:a3:0a:3c:2f:a7:0c:0d:87:16:fb:2e:cb:d4:08: 97:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FF:59:A1:AD:6E:D7:07:08:DB:1E:4C:9D:89:EE:8E:3C:F0:67:5D X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.238.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:51:d4:77:da:37:46:f9:3a:03:f6:83:97:af:2d:94:11:5d: 97:f1:ec:6b:d6:ab:8c:a1:43:89:d4:f7:cc:5d:d0:d3:f6:25: 71:10:64:f9:10:9b:f6:ef:39:bf:9d:bf:45:06:da:19:69:ae: 31:60:66:35:88:8f:4c:ca:5e:f6:56:60:a6:b2:ad:be:55:2f: ba:f1:67:1d:36:9f:93:19:1c:44:44:48:09:ee:50:c9:1e:23: e1:bb:af:bf:58:5d:42:31:34:41:a9:7f:16:33:c3:02:8d:fc: b6:95:f3:90:5c:fa:d9:72:3c:07:cd:5f:ed:9a:1c:f0:0f:41: 42:df:cf:9d:f9:a3:01:7e:3d:b7:a1:a3:f7:a3:fc:cb:64:da: 51:45:bf:66:53:cd:63:15:8f:c3:c9:7c:02:8a:c1:81:23:ca: 9f:c0:67:84:f4:6f:1e:35:87:05:fb:f8:b4:40:9c:c4:50:83: 32:42:f0:5e:65:50:bd:f9:01:3c:bf:37:5e:5c:54:89:ed:41: e4:ff:5a:ca:be:24:51:a6:6a:eb:6c:e0:02:52:59:1b:16:09: f0:c3:c4:c9:5c:b5:97:92:75:4a:6c:a5:1e:86:0d:8d:6d:e3: 38:59:cd:e1:39:06:c2:4b:2f:67:0c:9d:05:a9:61:f2:10:77: d5:00:1f:e4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBrSlnPSy6/w2OmuQUF6QCSxhPG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNDA3MjYwMTU1MDBaFw0yNTA3MjUwMjAwMDBaMDMxMTAvBgNV BAMTKDAxRkY1OUExQUQ2RUQ3MDcwOERCMUU0QzlEODlFRThFM0NGMDY3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkl3ZEJv3YKRvwmvrMbO1SUp1 xs5998tL20QXESytZ5K3XDVksrIkbbkF0xoLWRS7QALBXsmoUG9FXGUNsjBHW9kT aJJaMZmZsT1OBThMa/FUUYSHIneQ03VfJa4EuLRh86ESFnp25UdUEFPgOUx/Y330 bHKrsm6XmEPD1ayV+WwuZ3pVwE4CZF8JtcbU8P43deG1ivanQc4kLt4/nepLZVNr Z9krAHHAoIE+GZabOKrSbNlhtST8Cnad3xHoOytbq7sy2pHxpb+FX5IoyoTsr6Hd +orrjnJc7QnSUfAOwAlC1Nl92RQKEcS648tn5MCjCjwvpwwNhxb7LsvUCJf/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAf9Zoa1u1wcI2x5MnYnujjzwZ10wHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwZDM0ZTc3LTZjZjYtNDE4Ny05 MDgzLTFjN2E4ODE5ZTk2NS8wLzMxMzAzMzJlMzEzNDM5MmUzMjMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnle4wDQYJ KoZIhvcNAQELBQADggEBAJ9R1HfaN0b5OgP2g5evLZQRXZfx7GvWq4yhQ4nU98xd 0NP2JXEQZPkQm/bvOb+dv0UG2hlprjFgZjWIj0zKXvZWYKayrb5VL7rxZx02n5MZ HERESAnuUMkeI+G7r79YXUIxNEGpfxYzwwKN/LaV85Bc+tlyPAfNX+2aHPAPQULf z535owF+Pbeho/ej/Mtk2lFFv2ZTzWMVj8PJfAKKwYEjyp/AZ4T0bx41hwX7+LRA nMRQgzJC8F5lUL35ATy/N15cVIntQeT/Wsq+JFGmauts4AJSWRsWCfDDxMlctZeS dUpspR6GDY1t4zhZzeE5BsJLL2cMnQWpYfIQd9UAH+Q= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org